"(...)storing passwords in clear-text dates back to membership software used in 2009. Since that time, the company has been involved with a large migration process moving from legacy systems to newer technology."

They were lucky. After all, the passwords were stored unencrypted for 5 years!
Thank God I'm not their customer.
Excuse me my bad english.